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Systems Engineering processes integrate skills with 
resources to define and methodically service the 
Space Shuttle Program (SSP) need to limit debris risk 


Debris risk mitigations were implemented since the 
inception of the SSP 

Debris struck the Space Shuttle Columbia (STS-107) 
during ascent causing the tragic loss 

SSP elevated the need to understand and limit debris 
hazards associated with launch phase 

Debris hazards remain top risks for the Space Shuttle 
Vehicle (SSV) due to analytical uncertainties and limited 
controls 
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Top Debris Risk Types 

Liftoff Debris 

- Begins Day of Launch (DOL) from tanking through vehicle tower 
clear 

- Subject of this presentation 

Ascent Debris 

- Begins DOL after vehicle tower clear until External Tank separation 

Micrometeoroid Orbital Debris 

- Begins DOL after External Tank Separation until Re-entry 
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Space Shuttle Liftoff Debris Definition 



• Liftoff debris is any hazardous mass transporting inside 
the Critical Debris Zone on DOL from tanking 
through vehicle tower clear 


Critical Debris Zone in Red 
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Examples: Space Shuttle Program Liftoff Debris 
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NASA Systems Engineering Process (NPR7123.1A) 



Technical Management 
Processes 


T^cbnic^l Panning 
Process 

10, Technical Planning 


Product Realization 
Processes 


System Design 
Processes 


Requirements Definitions 
Processes 

1. Stakeholder Expects, linns 
Definition 

2. Tacftnical Requirements 
Definition 


Product Transition 
Process 

9. produc. Transition 


Technical Control 
Processes 

11. Requirements Management 

12. Interface Management 

1 3- T ochr.iL : -i Risk M a nagemont 

1 4 . Conf i gyra ti nn M^n ago r i er: 

15. I echriica, Data Management 


Evaluation Processes 

T. Product Verification 
S. Product Validation 


Technical Solution 
Definition Processes 

3. Logics Decomposition 

4. "Je-n gn Salutin'- Definition 


Technical Assessment 
Process 

IS. Technical Assessment 


Design Realization 
Processes 

5. Product Implementation 

6, Product In Ley ration 


Technical Decision 
Analysis Process 

17. Decision Analysis 


Requirements Flow Down 
From Level above 


Realize Products 
to Top Level 


Requirements Flow Down 
to Level below 


Realized Products 
from Level below 


System Design Processes 
applied to each WBS Model 
down and across 
system structure 


Product Realization Processes 
applied to each product 
up and across 
system structure 
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Liftoff Debris Systems Engineering Process 


Technical Management 


System Design 





Technical Planning Process 

10. Technical Planning 

- Testing 

- Analyses 




Technical Control Processes 

1 . Requirements Management 

- Technical Boards 

12. Interface Management 

- Launch Pad Controls 

- Walkdowns 

13. Technical Risk Management 

- LOD Risk Management 

- IDBR-01 

14. Configuration Management 

- CRs & Process 

15. Technical Data Management 

- Models & Analyses 

- Database 

- Mapping Tool 



Technical Assessment 
Process 

16. Technical Assessment 

- Walkdowns 

- UFA Process 

- Statistical trending 

- Imagery Review 



Technical Decision 
Analysis Process 

17. Decision Analysis 

- DOL Analyses 

- What needs to be improved 


Product Realization 




Product Transition 
Process 

9. Product Transition 

- Resource/ Asset Transaction 

- Improvements 

- Lessons learned 

- Closeout 




Evaluation Processes 

7. Product Verification 

8. Product Validation 

- Imagery Review 

- Models 

- Statistics 

- Testing (Material, Ballistic, 
Wind Tunnel) 

- Debris Sims 




Design Realization 
Processes 

5. Product Implementation 

- Pad Repair Process 

- Inspection Process 

6. Product Integration 

- KSC ERB 

- PSE&I CERB/PRB 
-DIG 

- FRR Process 
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Example of Liftoff Debris Systems Engineering Process 


STS-119 revealed a bolt liberation trend on the Fixed 
Service Structure (FSS) 275’ level elevator room 

STS-119 Interim STS-125 Final STS-129 

Launch STS-119 UFA Process R e P a ' r Launch Repair Launch 

1111111 1111111 1 1 \ 

11 15 3 16 17 1 4 14 5 10 13 13 7 8 5 7 8 



System Design Processes (1-4) Product Realization Processes (5-9) Technical Management Processes (10-17) 


11) Bolts violated accepted risk (STS-120, STS-126, and STS-119) 

15) LOD Team adds new debris finding to database, compares to existing entries, and identifies trend 

3) LOD Team characterized analysis parameters (mass range, drag model, release timing, starting location, etc.) 

16) MSFC analysts provided transport analysis showing criticality of this region and why this condition was unacceptable 

17) LOD decided to elevate issue to management & KSC engineers through IFA process 
1) LOD Team conveyed hazard to stakeholders [KSC, JSC, MSFC] 

4) LOD Team coordinated with KSC engineers to ensure repair adequately mitigated the 
liberation of bolts 

14) KSC updated configuration to reflect planned repair procedures 

5) Interim repair verified each bolt was tight and applied RTV over bolt heads 
10) Coordinated UFA closure process 

13) Due to repairs, no change in overall risk posture or requirements 
13) Issue (as part of UFA) documented in backup section of hazard report 

7) Pad walkdown to check that repair was implemented per plan 

8) Pad walkdown to check that the interim repair survived launch 
5) Final repair replaced old bolts with new stainless steel fasteners 

7) Pad walkdown to check that repair was implemented per plan 

8) Pad walkdown to check that the final repair survived launch 
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Liftoff Debris Operational Phase of Systems Engineering 



Documentation 

Requirements: 

NSTS 07700 Vo I X Bk 1 
NSTS 60559 Vol 1 
NSTS 08303 
NSTS 16007 
Analytical Resources: 

NSTS 60559 Vol 3 
-Analysis Methodology 
Sub-tier Methodology Docs. 
Ascent Debris Source Database 
Liftoff Debris Website 
- Analyses, Assessments, Links 
Liftoff Debris Database 
Integrated Hazard Reports: 

IDBR-01 - Integrated Debris |- 
Risks: 

SIRMA Risk #2846 


Risk Assessments 
Individual items 
Bounding analyses 
Accepted Risks/Hazards 


Analyses 

Testing (Materials, Ballistics) 

Modeling/Simulation 

Statistics 


Launch Pad Readiness 
Procedures/Controls 
Hardware Configuration 
/Condition 


Change Management 

Boards [CM, PSE&I CERB/PRB, KSC ERB, SICB, PRCB] 

Debris Integration Group (DIG) [MSFC, JSC, KSC, AMES] 
[Orbiter, SSME, ET, RSRB, GO, S&MA] 

Imagery Integration Working Group (IIWG) [MSFC, JSC, KSC] 
Shuttle Integrated Risk Management Application (SIRMA) 
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Flight Readiness 


• Certification of Flight Readiness (CoFR) for Liftoff debris 
includes 

- Lift-off debris from previous mission 
dispositioned 

- Flight acceptance rationale has been provided 
for Lift-off debris sources/causes 

- Lift-off debris mission support documentation, 
processes and tools are in place for the 
up-coming mission 
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Day of Launch & Liftoff Debris Team Systems Engineering 


MSFC Huntsville Operations Support Center (HOSC) 

• Facilitates Space Shuttle Vehicle monitoring 

• Provides capability to analyze launch data, and assist in day of launch 
problem resolution. 

• Enables integrated connections among element prime contractors and 
the KSC Launch Control Center. 

Liftoff Debris Team 

• Assembles proper skills and resources 

• Provides coordinated analytical transactions to characterize potential 
liftoff debris hazards 

• Communicates among stakeholders via voice loops and emails 

• Enables element hardware owners to assess risk posed by potential 
liftoff debris hazards 
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Day of Launch Communications 



MSFC 

KSC 

JSC 

Management 

X 

X 

X 

Engineering 

X 

X 

X 

Integration 

X 

X 

X 

Safety 

X 

X 

X 


Orbiter (Boeing) 


X 

X 

SSME (Pratt & Whitney) 

X 

X 


ET (Lockheed Martin) 

X 

X 


RSRB/RSRM (ATK/USA) 

X 

X 


Ground Operations (USA) 


X 


Damage Assessment Team 



X 


Final Inspection Team 


X 


Imagery 

X 

X 


Radar 


X 



Debris Integration Group 

X 

X 

X 

Ascent Debris 


X 

X 

Liftoff Debris 

X 




* Other support sites exist & are 
communicated with across the country 
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Liftoff Debris Data Collection After Each Launch 


Compile & Synthesize Launch Data 



Post Launch Pad Walk Down Jmagery Reviews ___ Instrumentation Data Reviews 

Records Each Liftoff Debris Case (KSC JSC MSFC) Technical Panels (JSC & MSFC 



Debris Source Identification 


Environmental Change 
Identification & Analyses 
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Characterizes each debris item 
All Post Columbia Launches 
Database content: 

- Mission data (#, wind data, time, hardware) 

- Debris properties (mass, size, material, etc.) 
-- Locations (pre- & post-launch) 

-- Imagery info (camera observations, timing) 
-- Resolution (mitigation or risk assessment) 
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Assess Liftoff Debris Post Launch 

In Flight Anomaly Resolution 


Integrated In-Flight Anomaly (UFA) 
Resolution Process 


Kennedy In Flight Anomaly (KIFA) 

• Launch and Landing Debris 

• Launch Support GSE and Facilities Abnormalities 

Integrated In Flight Anomaly (UFA) for LOD 

• Debris Violations Prior To Pad Clearance 

IFA Responsibilities 

• KIFA 

- Assess anomalies 

- Coordinate expertise to evaluate potential issues for; launch support 
systems and facilities/or hazards 

- Promote corrective action 

- Document rationale 

• UFA 

- Assess anomalies 

- Coordinate expertise to evaluate potential cross element issues 
and/or impacts to integrated hazards. 

- Promote corrective action 

- Document rationale 

IFA Adjudication Authorities related to LOD 

• KIFA: KSC Engineering Review Board (ERB) 

• UFA: Systems Integration Control Board (SICB) 

Reference: NSTS 08126 Problem Reporting and Corrective Action System Requirements 
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Change Management - Example changes 


Change Type 


Associated Board, Panel, or Working Group 


- Hardware removal or repair to acceptable state . KSC ERB 

- New/update debris controls at Launch Pad KSC ERB, PSE&I CERB/PRB, SICB 

- New/updated analyses PSE&I CERB/PRB, DIG, SICB, 

Tech Panels (Aero, Thermal, etc.) 

- New/updated instrumentation KSC ERB, Tech Panels 

- New/updated imagery IIWG, SICB 

- New/updated risk assessment PSE&I CERB/PRB, SICB, MSERP, ISERP 

- New/updated requirements PSE&I CERB/PRB, SICB, PRCB 


Legend of Acronyms 


PSE&I 
PSE&I PRB 
PSE&I CERB 
KSC ERB 
SICB 
PRCB 
DIG 
IIWG 
SIRMA 

ISERP/MSERP 
Tech Panels 


Propulsion Systems Engineering & Integration 

PSE&I Project Review Board 

PSE&I Chief Engineer Review Board 

Kennedy Space Center Engineering Review Board 

Systems Integration Control Board 

Program Requirements Control Board 

Debris Integration Group 

Imagery Integration Working Group 

Shuttle Integrated Risk Management Application 

Integrated/MSFC Safety Engineering Review Panel 

Technical Panels (e.g. Aerodynamics, Loads & 

Dynamics, Thermal, Instrumentation, etc.) 
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Elements of Change Management 



CERB 

CM 

CR 

CPE 

PRB 

PRCB 


Chief Engineer Review Board 
Configuration Management 
Change Request 
Change Package Engineer 
Project Review Board 
Program Requirements Control Board 
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Launch Pad Readiness 

Continuous Foreign Object Debris (FOD) Walk Down Inspections 

- Multiple daily FOD inspections occur to limit FOD proximate to all SSV systems 

- FOD database recorded metrics & findings 

LOD Team Post Launch Pad Walk 
Down Inspections 

- Inspections occur < T +7 days 

- Assesses pad conditions 

- Reports map liftoff debris concerns, 
with descriptions, and pictures 

- Prioritizes KSC concerns for work 
prior to next launch 


In Flight Anomaly (IFA) Resolution 

- Closure rationale is produced by IFA owner 

- Closure typically occurs before next launch 

- Records corrective action 

- Identifies statistical trends in nominal debris 
attributes 
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Pad Readiness Standings 
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NASaMSFC PSEl 


- Launch pad repair & construction occurs pre-rollout Example Launch Pad Walk Down Map 

- KSC Pad Readiness Review certifies area for SSV rollout 

- Enhanced control requirements commence 

- KSC Final inspection (T-4 hours) 

- Perform DOL debris assessments as required 
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Liftoff Debris Analyses 


Objectives 

- Recognize liftoff debris hazards that put Space Shuttle systems at risk 

- Reveal effective methods to control liftoff debris 

- Understand the nature and surrounding conditions of liftoff debris 

Subjects of Analysis 

- Liberation 

- Transport 

- Damage Tolerance 

Expertise & Resources 

- Shuttle Projects: 

- SE&I, OV, ET, SSME, RSRB, RSRM , Prime Contractors 

- Engineering: 

- Propulsion Systems, Materials & Processes, Impact Tests, Ballistics, Models, Simulations 

- Safety & Mission Assurance: 

- Statistical & Probabilistic Analysis, Hazard Analysis 
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Debris Transport Analysis Process 


Physical Properties 


Initial Conditions 
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Temporal and Spatial Framework of Analyses 


Typical Vehicle Position with Time During Liftoff 



<TO-6s TO-Ss TQ+D3s TtH1.9s TO+3s TD+4s m5s TQ*tfs 



Wind Directions With Respect to 
Shuttle & Pad Structures 



Computer Aided Design Models Detail Position & Geometry of Major Structures 


180 * 
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Computational Fluid Dynamics (CFD) Analyses 




Simulate Interaction of Wind and Plumes with the Vehicle and 
Launch Pad Structure 

- Transient Models 

- Steady State Models 

Quantify parameters to enable debris transport analyses 

- Wind & Gravity Features 

- Plume Entrainment & Plume Driven Features 

Complete model validations via comparison with actual launch 
data imagery and instrumentation records 





North-East Wind (045) 


East Wind (090) 


Cardinal Point ■( (TO + 0J sec) Trench Gas Velocity Profile 
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Debris Transport Analyses (DTA) 




• DTA reveals time, position, velocity, and 
impact energy for specific debris shapes 
and densities 


- Uses CFD generated flow field environments 

- Integrates temporal, atmospheric, physical 

and geometric properties into analysis 
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Analyzing Debris Materials & Impact Tests 




Materials tests & analyses 

- Reveals compositions & densities 

- Verifies specifications & processes 

- Provides key aspects in failure diagnostics 

Impact tests & analyses 

- Provides basis to establish debris transport 
boundaries 

- Reveals features of impactor break-up and 
rebound 

- Demonstrates impact vulnerability of flight 
hardware to specific impactor 

- Validates impact models 



■'? * ^ •> V , 
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Inconel Rust Refractory 
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Impact Analyses 

Damage threshold specifications are 
element project office responsibility 

DTA results are sorted into position 
bins according to element 

- SRB, ET, SSME and Orbiter 

Orbiter DTA results are sorted into 
bins according to surface material 

- FRSI, LRSI, AFRSI, RCC, HRSI Upper, 
HRSI Lower, and Windows 


RSRM/SRB 


ET Surfaces 


SSME 


Surfaces 


Surfaces 
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Shuttle Integrated Risk Management 


Likelihood Rating 

5 

Very Likely: -10' 1 
Expected to happen. 

4 

Likely: -10-* 

Could happen. 

Controls h ave significant lirnitatons or uncertainties. 

3 

Possible: HO -3 
Could happen. 

Controls exist with some limitations or uncertainties. 

2 

Um likely: MtT* 

Not expected to happen. 

Controls have minor limitations or uncertainties. 

1 

Highly Unlikely: -10 -5 

Extremely remote possibility that it will happen. 

Strong controls in place. 



1 2 3 4 5 

Consequence 


Identity and Assess Risk 

1 Start with a Concern. Is this a program risk? 

■ What information e avaiabte? Gather information: requirements status, problem data, 
trends, hazards, critical item history, etc. 

2, Define Risk Statement. 

■ Given the condition (At , there is a possibility that iBl will occur. 

(A) - Single phrase briefly 'describing current key circumstances or situations 
that are causing concern, doubt, anxiety, or uncertainty 
■(B) - Consequences or impacts of the current conditions that could be realized due to (A) 

3, Define the Consequences (B). Locate the most accurate descriptions) among the 
Safely, Mission Success, Supportability, Cost, and Schedule consequence descriptions, 

4, How likely is this risk scenario? Likelihood is the chance of a risk occurring. 

■ Evaluating the l ikelihood rating requires subjective judgment. Select the most accurate rating 
based on the quantitative values or the qualitative descriptions. 

- Only one rating is selected per risk statement. It is eval uated for the period being assessed 

5, Plot the Risk. Select the h ighest consequence score. Plot this against the ONE Likel ihood Score 
on the RED/YELL OVWGREEN risk matrix. 


Consequence Rating 


TECHNICAL | 

Safety 

Ffeman Meal* 

- Mhor artlrst aid Injury 

- Moderate Injury, Illness, 
Incapacitation or Impairment 

- ggrflcam or long-term Injixy, 
llress, Incapacitation or tnpatment 

- Permanent, or majsr njury. 

Illness, hcapadtatiai or impairment 

- Death 

System Safety 

- Damage to non-flight Cfflcal 
assets 

- Loss of nan-ngrt critical assets 

- Damage to major element's) af 
ntyit vetlcle or ground facility 

- Loss of major elements) Df T^fl, 
vehicle a ground fad Ity 

-Loss cT program 

Envirornertai 

Safety 

-Mina eriVlrarmerral impact 

- Moderate envtronnerol Impact 

- SlgnncanlenvrQnmenlal mpacl 

- Major environmental Impact 

- Catashcpnic environmental Impact 

HSE CampUance 

- Mia noTHeonpItance 

- Moderate non-compHance 

- Dlgrtflcamnon-Doirplarioe 

- Major rran-Dompllanee 

- Nave delned 

Mission 

Success 

Stjme Opeottons 

- Hrorlnsreaseln'igTl 
operations Bmelne-s 
or complexity 

- Falixe to achieve any planned SSP 
mission oijectf.e 

- Mlrimiiri dixahon flight (MDFJ 

- Dhgffllcam Increase n fllgtt 
operations Umeines a complexity 

- Failure to achieve a I Shuttle 
ma|a misston objectives JMriO] 

- Early mission termination 

- Pad abort or Intact a tor 

- Contingency abnrt 

- Shucie crew evacuatlai 

ISS Cpsraftons 

- Nae delned 

- Falixe to achieve any planned ISS 
mission objective 

- Monedenred 

- Failure 1o support assembly 
critical ISS requirements 

- ISS evacuation 

SSP De^emena i 
ActWBes 

- Falixe to meet developmental 
requrements, minor 
wataramds or temporary 
waivers neqJred tor flight 

- Matte denned 

- inanity to complete cormh to 
ngnt lest, analysts or certification 

- Fame to meet devetopmental 
requliements. SJgnncantor 
permanent where required formal 

- Failure to meet Key development 
requirements (e.g. performance: 

- Nae desired 

Supportability 

Capability to 
ASrtai S-SPXsseft 

-Temporary usage less or LOOM 
of navmgtrt critical 3sse: 

- Permanent LEage loss or LOOM 
df non-flrjil critical asset 

- Tempaary usage loss or LOCM af 
ma|Dr etementjt) Df ntyit vehicle or 
ground facility 

- Permanent usage loss a LQCM of major 
elemetth'si ir flight vehicle or ryound 
tociHy 

- In*llty to support tortiner Dhuttle 
iltofrl operates 

fihgftf Processing 

- Ostlateral damage to non-fllgtrt 
optical assets during processing 

- Moderate n crease timeline or 
eompleitty 

- Collateral damage to major elements) 
of lllgh; vehicle or iground toellty during 
process! rg 

- Significant Increase d Tel re or complexity 

- Loss of maja element^) of flight vetilde or 
grand faculty die to direct a col lateral damage 
during processing 

- Nave delned 


o 

s 

z 

B 

o 

Et 

Cl 

Schedule 

SSPfiSSS&KdJe 

- Miner operational sips 

- Less than 7-day slip In an SSPflSS 
freeze point or milestone 

- Greater thari 7-day sip In an SSPilSD 
Tees- point or milestone 

- ISS hanctoareisoflware delvery date 
not met tor on-orttt needs 

- One flight decrease flom baselined manifest 

- One mteslon Increase In USD assembly plan 

- Fllryfl delay ataxting pre-F^Ft 

- DSP, 'ISS milestone slid of more than 
one month 

- Two a more figm decrease Iton baselned 
manfesl 

- Two a more mlsdon Increase n ISS 
assembly pan 

- Flight delay alter L-2 

- Cannot achieve mala SSP.UDSP milestone 

Cost 

R&\t,Retvjorj 

Cost 

<f1 Ml 

gUM-fSM 

*5M-*1SM 

SI S M - 52E M 

’-S25M 


9/18/2006 


Reference NSTS 07700, Volume XIX 
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Risk Assessments 

• Baseline liftoff debris assessment methodology 

- Identify and characterize key types of persistent debris 

- Characterize key debris types 

• Source locations 

• Material 

• Risk assessment mass 

- DTAto prioritize hazardous source locations of debris 

- Record statistics of debris attributes 

• Assign mitigation for each debris items 

- Limit debris occurrence through mitigation 

- Establish mitigation categories 

- Identify limitations in analyses and mitigation controls 

• Assess effectiveness and trends 

- Quantify debris: instances, types, masses, locations, 
mitigations, etc. 

- Ascertain changes in debris attributes 

- Develop statistical trends 

• Establish normal boundaries 

• Detect outliers to investigate further 

- Qualify debris hazards based on bounding assumptions 

• Compare changes to previous risk assessment 

• Communicate risk to Space Shuttle Program for disposition 



1 2 3 4 5 

Consequence 
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Lessons Learned to Mitigate Liftoff Debris Risk 

Systems Engineering process can be effectively applied to mitigate liftoff debris for 
future space launch systems 

Require launch pad design metrics to minimize liftoff debris generation 

- Design structures without places for debris to hide 

- Avoid designing areas difficult to access for repair of rust/corrosion 

- Establish pad cleanliness standards 

- Minimize hardware closest to vehicle 


Plume driven debris is a significant hazard due to high energy content 

- Avoid protrusions in plume flow that can direct flow upward toward the vehicle 

- Multi-plume interaction on launch pad deck produces transient fountain effect with upward flow 

- If upward flows exist, mitigate them (e.g. intense water flow) 


Integrate appropriate liftoff debris and system owner expertise into launch facility 
walkdown inspections 


Integrate imagery surveillance into liftoff debris analyses 


National Aeronautics and Space Administration 

Shuttle Integrated Risk from Liftoff Debris 

Catastrophic damage is possible given history of debris releases during liftoff 

All elements are vulnerable to some debris sources 

Liftoff debris hazard is documented in Integrated Hazard Report IDBR-01 

Significant uncertainties exist in characterizing the liftoff debris environment 
through observation and analysis 


Space Shuttle Program accepted risk to vehicle due to liftoff debris 

- NSTS 60559 Vol III - Liftoff Debris Assessment Methodology 

- Liftoff debris mitigation steps and handling processes are documented 

- Emergent liftoff debris mitigations are resolved on per flight basis 


